CVE-2024-6738

CVE-2024-6738 concerns WisdomGarden’s Tronclass: the thumbnail API lacks access control, allowing unauthenticated remote attackers to obtain certain files by modifying the URL. The initial NVD entry provides a medium severity estimate (CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) with a network...